Agent skill
privacy
Privacy and data protection - GDPR, CCPA, consent. Use when handling user data.
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/data/privacy
SKILL.md
Privacy Guideline
Tech Stack
- Analytics: PostHog
- Email: Resend
- Tag Management: GTM (marketing only)
- Observability: Sentry
Non-Negotiables
- Analytics and marketing must not fire before user consent
- PII must not leak into logs, Sentry, PostHog, or third-party services
- Account deletion must propagate to all third-party processors
- Marketing tags (GTM, Google Ads) must not load without consent
- Conversion tracking must be server-truth aligned, idempotent, and deduplicated
Context
Privacy isn't just compliance — it's trust. Users share data expecting it to be handled responsibly. Every log line, every analytics event, every third-party integration is a potential privacy leak.
The review should verify that actual behavior matches stated policy. If the privacy policy says "we don't track without consent," does the code actually enforce that? Mismatches are not just bugs — they're trust violations.
Driving Questions
- Does the consent implementation actually block tracking, or just record preference?
- Where does PII leak that we haven't noticed?
- If a user requests data deletion, what actually gets deleted vs. retained?
- Does the privacy policy accurately reflect what the code actually does?
- How would we handle a GDPR data subject access request today?
- What data are we collecting that we don't actually need?
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?